Ac23 Firmware CVE-2026-1420
HIGHCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionNVD
A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This manipulation of the argument wpapsk_crypto causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.
AnalysisAI
Unauthenticated attackers can trigger a buffer overflow in Tenda AC23 firmware version 16.03.07.52 through the wpapsk_crypto parameter in /goform/WifiExtraSet, enabling remote code execution with full system compromise. Public exploit code is available and actively used in the wild, yet no patch has been released by the vendor. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify and inventory all Tenda AC23 devices running firmware 16.03.07.52 across the organization; restrict administrative access to affected devices to trusted networks only. Within 7 days: Implement network segmentation to isolate affected routers from critical systems; enable enhanced monitoring and logging on these devices; evaluate replacement equipment from alternative vendors. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today